Listing of Claims : 

1 . (Currently Amended) An asymmetrical cryptographic method for protecting a hard- 
wired electronic logic chip against fraud in transactions between the hard-wired electronic chip 
and an application, including calculating an authentication value V from input parameters in the 
electronic chip, said method comprising the steps of: 

producing at least one pseudo-random number r at the application prior to 
a transaction before the hard-wired electronic chip is placed into circulation ; 

calculating, at the application prior to the transaction before the 
hard-wired electronic chip is placed into circulation , parameters x corresponding 
to the at least one pseudo-random number r, each corresponding parameter x 
being linked to the pseudo-random number r by a mathematical relationship; 

storing the corresponding parameter x in a data memory of the electronic 
chip prior to th e transaction before the hard-wired electronic chip is placed into 
circulation ; 

producing, at the chip, the pseudo-random number r specific to the 
transaction via a serial pseudo-random generator included in the hard-wired 
electronic chip, said hard-wired electronic chip reading the stored corresponding 
parameter x calculated by the application prior to the transaction before the 
hard-wired electronic chip is placed into circulation ; 

sending from the hard-wired electronic chip to the application the 
corresponding parameter x calculated by the application^ prior to tho transaction 
before the hard-wired electronic chip is placed into circulation , which is linked to 
the pseudo-random number r by the mathematical relationship and stored in the 
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data memory of the hard-wired electronic chip; 

calculating, at the hard- wired electronic chip, a parameter y constituting an 
entire or a portion of the authentication value V via a serial function whose input 
parameters are at least the random number r specific to the transaction and a 
private key s belonging to an asymmetrical pair of keys; 

sending the authentication value V from the hard-wired electronic chip to 
the application; and 

verifying, at the application, said authentication value V via a verification 
function whose input parameters consist of public parameters including at least a 
public key p. 

2. (Previously Presented) The method according to claim 1, wherein producing the 
random number r specific to the transaction comprises: 

mixing some or all of the input parameters via a mixing function and 
supplying a series of bits as an output of the mixing function; 

changing a state of a finite state automaton from an old state to a new state 
in accordance with a function depending at least on the old state and a value of the 
series of bits; and 

determining a series of random bits to form an entire or a portion of the 
random number r via an output function having input arguments including at least 
the state of the automaton. 
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3. (Currently Amended) The method according to claim 2, wherein one input parameter 
is a secret key K shared by the hard-wired electronic chip and the application and is stored in a 
protected memory region of the hard-wired electronic chip. 

4. (Previously Presented) The method according to claim 1, wherein the mathematical 
relationship comprises a function g r in a set G of items g provided with an operation having at 
least an associative property. 

5. (Previously Presented) The method according to claim 4, wherein the set G is a group 
Z n * of positive or null integers less than n and prime with n, wherein n is a positive integer. 

6. (Previously Presented) The method according to claim 4, wherein the set G is any 
elliptical curve constructed on any finite body. 

7. (Previously Presented) The method according to claim 1, wherein the serial function is 
an arithmetical function executing operations from a list comprising addition, subtraction, and 
left-shifts or right-shifts. 

8. (Previously Presented) The method according to claim 7, wherein the arithmetical 
function executes only addition. 

9. (Previously Presented) The method according to claim 7, wherein the arithmetical 
function executes only subtraction. 
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10. (Previously Presented) The method according to claim 7, wherein the arithmetical 
function input arguments further include input parameters and the arithmetical function entails 
executing one of the operations y = r and y = r + s as a function of a value assigned by the 
application to an input parameter t of the serial function. 

11. (Currently Amended) The method according to claim 10, wherein the mathematical 
relationship comprises a verification function g r in a set G of items g provided with an operation 
having at least an associative property and wherein the verification function compares a result 
obtained by applying the verification function to the authentication value V with either the value 
x or the product of the value x and the public key p of the hard-wired electronic chip 
corresponding to its secret key s, as a function of the parameter t, which comprises testing one of 
the equations g y = x and g y = xp, as a function of the value of the parameter t, where y is equal to 
the authentication value V and p is the public key of the hard-wired electronic chip 
corresponding to its secret key s, as defined by the function p = g s . 

12. (Previously Presented) The method according to claim 7, wherein the arithmetical 
function has, for further input arguments, input parameters and comprises executing the 
operation y = r or the operation y = r - s as a function of a value assigned by the application to an 
input parameter t of the serial function. 

13. (Currently Amended) The method according to claim 12, wherein the mathematical 
equation comprises a verification function g r in a set G of items g provided with an operation 
having at least the property of being associative and wherein the verification function compares 
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the result obtained by applying the mathematical relationship to the authentication value V with 
the value x or with the product of the value x and the public key p of the hard-wired electronic 
chip corresponding to its secret key s, as a function of the value of the parameter t, which 
comprises testing the equation g y = x or the equation g y .p = x, as a function of the value of the 
parameter t, where y is equal to the authentication value V and g is the public key of the hard- 
wired electronic chip corresponding to its secret key s, as defined by the equation p = g s . 

14. (Previously Presented) The method according to claim 7, wherein the arithmetical 
relationship has, for further input arguments, input parameters and comprises executing the 
operation y = r + 2's as a function of a value assigned by the application to an input parameter t 
of the serial function, said parameter t comprising a string of m bits in which only one bit tj is 
equal to 1 , m being a natural integer. 

15. (Currently Amended) The method according to claim 14, wherein the mathematical 
relationship comprises a verification function g r in a set G of items g provided with an operation 
having at least an associative property and wherein the verification function tests the equation 

g y = xp 2 , as a function of the value of the parameter t, where y is equal to the authentication 
value V and p is the public key of the hard-wired electronic chip corresponding to its secret key 
s, as defined by the function p = g s . 
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16. (Previously Presented) The method according to claim 7, wherein the arithmetical 
function has for, further input arguments, input parameters and comprises executing the 
operation y = r + 2 l s as a function of the value assigned by the application to an input parameter t 
of the serial function. 

17. (Currently Amended) The method according to claim 16, wherein the mathematical 
relationship comprises a verification function g r in a set G of items g provided with an operation 
having at least an associative property and wherein the verification function tests the equation 

g y = xp 2 ' , as a function of the value of the parameter t, where y is equal to the authentication 
value V and g is the public key of the hard-wired electronic chip corresponding to its secret key 
s, as defined by the function p = g s . 

18. (Previously Presented) The method according to claim 7, wherein the arithmetical 
function has, for further input arguments, input parameters and executes the operation y = r + ts 
as a function of the value assigned by the application to an input parameter t of the serial 
function, where t is an integer. 

19. (Currently Amended) The method according to claim 18, wherein the mathematical 
relationship comprises a verification function g r in a set G of items g provided with an operation 
having at least an associative property and wherein the verification function compares the result 
obtained by applying the verification function to the authentication value V with the value x or 
the product of the value x and the public key g of the hard-wired electronic chip corresponding to 
its secret key s, as a function of the value of the parameter t, which comprises testing the 
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equation g y = xp l , as a function of the value of the parameter t, where y is equal to the 
authentication value V and £ is the public key of the hard-wired electronic chip corresponding to 
its secret key s, as defined by the function p = g s . 

20. (Currently Amended) The method according to claim 1, wherein the parameter x sent 
from the hard-wired electronic chip to the application is a result obtained by applying a hashing 
function to at least one item linked to the random number r by a mathematical relationship and to 
an optional field D containing data linked to the application. 

21. (Previously Presented) The method according to claim 20, wherein the arithmetical 
function has, for further input arguments, input parameters and executes the operation y = r + 2 ! s 
as a function of the value assigned by the application to an input parameter t of the serial 
function, said parameter t comprising a string of m bits in which only one bit U is equal to 1, 
where m is a natural integer. 

22. (Currently Amended) The method according to claim 21, wherein the mathematical 
relationship comprises a verification function g r in a set G of items g provided with an operation 
having at least an associative property and wherein the verification function tests the relationship 

h(g y /p 2l ,D) =x, as a function of the value of the parameter t, where y is equal to the 
authentication value V and p is the public key of the hard-wired electronic chip corresponding to 
its secret key s, as defined by the function p = g s . 
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23. (Currently Amended) The method according to claim 21, wherein the mathematical 
relationship comprises a verification function g r in a set G of items g provided with an operation 
having at least an associative property and wherein the verification function tests the relationship 

h(g y . p 2 ' ,D) = x, where y is equal to the authentication value V and p is the public key of the 
hard-wired electronic chip corresponding to its secret key s, as defined by the function p = g" s . 

24. (Previously Presented) The method according to claim 20, wherein the arithmetical 
function has, for further input arguments, input parameters and executes the operation y = r - 2 ! s 
as a function of the value assigned by the application to an input parameter t of the serial 
function, said parameter t comprising a string of m bits in which only one bit ti is equal to 1, 
where m is a natural integer. 

25. (Currently Amended) The method according to claim 24, wherein the mathematical 
relationship comprises a verification function g r in a set G of items g provided with an operation 
having at least an associative property and wherein the verification function tests the relationship 

h(g y .p 2i ,D) = x, where y is equal to the authentication value V and p is the public key of the 
hard-wired electronic chip corresponding to its secret key s, as defined by the function p = g" s . 
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26. (Currently Amended) The method according to claim 20, wherein the mathematical 
function comprises a verification function g r in a set G of items g provided with an operation 
having at least an associative property and wherein the parameter x sent from the hard-wired 
electronic chip to the application is a result obtained by applying a relationship of x = h(g r ,D), 
where D designates an optional field containing data linked to the application and h is the 
hashing function. 

27. (Currently Amended) The method according to claim 26, wherein the serial function 
has input arguments comprised of input parameters and executes either the operation y = r or the 
operation y = r + s as a function of the value assigned by the application to an input parameter t 
of the serial function and wherein the verification function compares the value x to the value 
h(g y ,D) or the value h(g y .p,D) as a function of the value of the parameter t, where y is equal to 
the authentication value V and g is the public key of the hard- wired electronic chip 
corresponding to its secret key s, as defined by the equation p = g" s . 

28. (Currently Amended) The method according to claim 26, wherein the serial function 
has, for input arguments, input parameters and executes one of the operation y = r and the 
operation y = r + s as a function of the value assigned by the application to an input parameter t 
of the serial function and wherein the verification function compares the value x to the value 
h(g y ,D) or the value h(g y .p,D) as a function of the value of the parameter t, where y is equal to 
the authentication value V and g is the public key of the hard-wired electronic chip 
corresponding to its secret key s, as defined by the equation p = g~ s . 
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29. (Currently Amended) The method according to claim 26, wherein the serial function 
has, for input arguments, input parameters and executes one of the operation y = r and the 
operation y = r - s as a function of the value assigned by the application to an input parameter t of 
the serial function and wherein the verification function compares the value x to the value 
h(g y ,D) or the value h(g y .p,D) as a function of the value of the parameter t, where y is equal to 
the authentication value V and g is the public key of the hard-wired electronic chip 
corresponding to its secret key s, as defined by the equation p = g s . 

30. (Previously Presented) The method according to claim 7, wherein the set G is the 
group Z n * of positive or null integers less than n and prime with n. 

31. (Previously Presented) The method according to claim 7, wherein the set G is any 
elliptical curve constructed on any finite body. 

32. (Currently Amended) A device including [[an]] a hard-wired electronic chip and 
configured to implement an asymmetrical cryptographic method for protecting the hard-wired 
electronic chip against fraud in transactions between the hard-wired electronic chip and an 
application, said hard-wired electronic chip reading one or more stored values of a parameter x 
calculated prior to a transaction by the application before the hard-wired electronic chip is placed 
into circulation , and said parameter x being linked by a mathematical relationship to a value of a 
random number r, the method comprising the hard-wired electronic chip calculating an 
authentication value V from input parameters, and said device comprising: 



- 11 - 



a serial pseudo-random generator for producing a random number r 
specific to the a transaction; 

first memory means for storing in the hard-wired electronic chip, before 
the hard-wired electronic chip is placed into circulation, the one or more values of 
the parameter x calculated prior to th e transaction by the application before the 
hard-wired electronic chip is placed into circulation and which are linked by the 
mathematical relationship to the value of the random number r; 

means for sending the parameter x linked to the random number r specific 
to the transaction from the hard-wired electronic chip to the application; 

means for executing a serial function having as input parameters at least 
the random number r specific to the transaction and a private key s belonging to 
an asymmetrical pair of keys and providing as output a parameter y; and 

output means configured to construct an authentication value V from at 
least the parameter y. 

33. (Canceled) 



- 12- 



